Latest Updates

forensik foto

sebelum saya mulai percobaan dengan foto yang saya miliki saya akan menerangkan beberapa hal tentang software yang saya pergunakan ini  :study:  maaf sekali lagi yuah jika artikel ini membosankan maklum saya hanya seorang pemula yang masih lom tau apa2  :|  okelah kita lansung ke TKP.

pada percobaan kali ini saya menggunakan software JPEGsnoop
Langkah-langkah untuk Proses file :

file JPEG dengan File-> Open ...
Simpan output dengan File-> Simpan Log ... jika diinginkan

Sebagai alternatif, Anda dapat drag-and-drop file JPEG ke ikon JPEGsnoop atau jendela utama dan laporan secara otomatis Membuka file JPEG secara otomatis akan memulai proses decoding dan generasi dari file log.
Ada beberapa pilihan dapat mengaktifkan decoding file JPEG . Jika opsi Auto ulang di jendela Konfigurasi dinonaktifkan, maka setiap perubahan pada Pilihan di bawah ini tidak akan tercermin dalam log sampai berupa file baru dibuka, atau Anda secara manual File-> ulang.
•Hide unknown EXIF tags - Opsi ini akan menonaktifkan decoding tag EXIF yang saat ini tidak dikenal di's database JPEGsnoop
•DHT Expand  - - Perluas yang JFIF Huffman tabel kode ke daftar aktual dari variabel-panjang string biner yang dicari selama proses decoding
•Scan Segment - Decode Image Pilihan ini ternyata di decoding nyata dari segmen data Scan.Dengan demikian, beberapa pemeriksaan dilakukan untuk memastikan bahwa semua kode panjang variabel adalah valid dan bahwa tidak ada korupsi data.
•Scan Segment - Histogram RGB Jika Decode Image diaktifkan, pilihan RGB Histogram akan menampilkan histogram untuk komponen RGB, selain pelaporan setiap YCC / RGB kliping.
•Scan Segment - Histogram Y - Jika Decode Gambar dan RGB Histogram pilihan diaktifkan, pilihan Y Histogram akan menampilkan histogram menggambarkan pencahayaan (Y) DC komponen gambar.  
•Scan Segment - Full IDCT - Bila pilihan ini diaktifkan, proses scan decode tidak seorang IDCT penuh (Inverse Discrete Cosine Transform) untuk menghasilkan tampilan gambar resolusi tinggi.
•Scan Segment - No IDCT - Bila pilihan ini diaktifkan, proses scan decode tidak melakukan IDCT, dan dapat menghasilkan resolusi gambar tampilan-rendah
•Scan Segment - Scan Dump - Mengaktifkan opsi ini dumps keluar 640 byte pertama dari scan data (dalam mulai dari Scan (SOS) segmen) dalam heksadesimal, setelah memasukkan byte telah ditangani
•Scan Segment - Detailed Decode... - Gunakan opsi ini untuk membuang keluar info rinci tentang VLC Huffman (variabel-panjang kode) yang membentuk bitstream Scan
•Maker Notes - Decode Maker Catatan bagian (-spesifik data produsen) jika itu adalah membuat didukung oleh JPEGsnoop.
•Configuration - Membuka sebuah jendela di mana Anda dapat mengatur beberapa opsi tambahan.

demikian dulu penjelasan tentang software yang saya gunakan kali ini jika ingin lebih jelasnya bisa langsung ke situs resmi JPEGsnoop nya. ok kita mulai percobaannya

pertama-tama saya mempersiapkan 2 buah foto, foto pertama asli dan belum terkena editan dan foto yang ke 2 adalh foto yang sama tetapi telah saya edit sedikit, kemudian jalankan software JPEGsnoop kemudian buka foto percobaan satu maka akan langsung tampil hasilnya , begitu juga foto yang ke 2:

foto pertama

JPEGsnoop 1.4.2 by Calvin Hass
  http://www.impulseadventure.com/photo/
  -------------------------------------

  Filename: [E:\Locker\Entertainmant\foto\fms story\000033.JPG]
  Filesize: [660733] Bytes

Start Offset: 0x00000000
*** Marker: SOI (xFFD8) ***
  OFFSET: 0x00000000
 
*** Marker: APP1 (xFFE1) ***
  OFFSET: 0x00000002
  length          = 9835
  Identifier      = [Exif]
  Identifier TIFF = 0x[49492A00 08000000]
  Endian          = Intel (little)
  TAG Mark x002A  = 0x002A

  EXIF IFD0 @ Absolute 0x00000014
    Dir Length = 0x000B
    [Make                                ] = "FUJI PHOTO FILM CO., LTD."
    [Model                               ] = "SP-3000"
    [XResolution                         ] = 720000/10000
    [YResolution                         ] = 720000/10000
    [ResolutionUnit                      ] = Inch
    [Software                            ] = "FDi V4.5 / FRONTIER355/375-1.7-0E-105"
    [DateTime                            ] = "2008:08:21 18:24:29"
    [YCbCrPositioning                    ] = Centered
    [ExifOffset                          ] = @ 0x00FE
    Offset to Next IFD = 0x00000210

  EXIF IFD1 @ Absolute 0x0000021C
    Dir Length = 0x0007
    [Compression                         ] = JPEG
    [XResolution                         ] = 720000/10000
    [YResolution                         ] = 720000/10000
    [ResolutionUnit                      ] = Inch
    [JpegIFOffset                        ] = @ +0x027A = @ 0x0286
    [JpegIFByteCount                     ] = 9193
    Offset to Next IFD = 0x00000000

  EXIF SubIFD @ Absolute 0x0000010A
    Dir Length = 0x000B
    [ExifVersion                         ] = 02.10
    [DateTimeOriginal                    ] = "    :  :     :  :  "
    [DateTimeDigitized                   ] = "2008:08:21 18:24:29"
    [ComponentsConfiguration             ] = [Y Cb Cr .]
    [MakerNote                           ] = @ 0x01B0
    [FlashPixVersion                     ] = 01.00
    [ColorSpace                          ] = sRGB
    [ExifImageWidth                      ] = 1818
    [ExifImageHeight                     ] = 1228
    [FileSource                          ] = DSC
    [SceneType                           ] = A directly photographed image

  EXIF MakerIFD @ Absolute 0x000001BC
    Makernote decode option not enabled.
 
*** Marker: DQT (xFFDB) ***
  Define a Quantization Table.
  OFFSET: 0x0000266F
  Table length = 67
  ----
  Precision=8 bits
  Destination ID=0 (Luminance)
    DQT, Row #0:   3   2   2   3   5   8  10  12
    DQT, Row #1:   2   2   3   4   5  12  12  11
    DQT, Row #2:   3   3   3   5   8  11  14  11
    DQT, Row #3:   3   3   4   6  10  17  16  12
    DQT, Row #4:   4   4   7  11  14  22  21  15
    DQT, Row #5:   5   7  11  13  16  21  23  18
    DQT, Row #6:  10  13  16  17  21  24  24  20
    DQT, Row #7:  14  18  19  20  22  20  21  20
    Approx quality factor = 90.06 (scaling=19.88 variance=1.14)
 
*** Marker: DQT (xFFDB) ***
  Define a Quantization Table.
  OFFSET: 0x000026B4
  Table length = 67
  ----
  Precision=8 bits
  Destination ID=1 (Chrominance)
    DQT, Row #0:   3   4   5   9  20  20  20  20
    DQT, Row #1:   4   4   5  13  20  20  20  20
    DQT, Row #2:   5   5  11  20  20  20  20  20
    DQT, Row #3:   9  13  20  20  20  20  20  20
    DQT, Row #4:  20  20  20  20  20  20  20  20
    DQT, Row #5:  20  20  20  20  20  20  20  20
    DQT, Row #6:  20  20  20  20  20  20  20  20
    DQT, Row #7:  20  20  20  20  20  20  20  20
    Approx quality factor = 89.93 (scaling=20.14 variance=0.34)
 
*** Marker: SOF0 (Baseline DCT) (xFFC0) ***
  OFFSET: 0x000026F9
  Frame header length = 17
  Precision = 8
  Number of Lines = 1228
  Samples per Line = 1818
  Image Size = 1818 x 1228
  Raw Image Orientation = Landscape
  Number of Img components = 3
    Component[1]: ID=0x01, Samp Fac=0x22 (Subsamp 1 x 1), Quant Tbl Sel=0x00 (Lum: Y)
    Component[2]: ID=0x02, Samp Fac=0x11 (Subsamp 2 x 2), Quant Tbl Sel=0x01 (Chrom: Cb)
    Component[3]: ID=0x03, Samp Fac=0x11 (Subsamp 2 x 2), Quant Tbl Sel=0x01 (Chrom: Cr)
 
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
  OFFSET: 0x0000270C
  Huffman table length = 31
  ----
  Destination ID = 0
  Class = 0 (DC / Lossless Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (001 total): 00
    Codes of length 03 bits (005 total): 01 02 03 04 05
    Codes of length 04 bits (001 total): 06
    Codes of length 05 bits (001 total): 07
    Codes of length 06 bits (001 total): 08
    Codes of length 07 bits (001 total): 09
    Codes of length 08 bits (001 total): 0A
    Codes of length 09 bits (001 total): 0B
    Codes of length 10 bits (000 total):
    Codes of length 11 bits (000 total):
    Codes of length 12 bits (000 total):
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (000 total):
    Codes of length 15 bits (000 total):
    Codes of length 16 bits (000 total):
    Total number of codes: 012

 
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
  OFFSET: 0x0000272D
  Huffman table length = 181
  ----
  Destination ID = 0
  Class = 1 (AC Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (002 total): 01 02
    Codes of length 03 bits (001 total): 03
    Codes of length 04 bits (003 total): 00 04 11
    Codes of length 05 bits (003 total): 05 12 21
    Codes of length 06 bits (002 total): 31 41
    Codes of length 07 bits (004 total): 06 13 51 61
    Codes of length 08 bits (003 total): 07 22 71
    Codes of length 09 bits (005 total): 14 32 81 91 A1
    Codes of length 10 bits (005 total): 08 23 42 B1 C1
    Codes of length 11 bits (004 total): 15 52 D1 F0
    Codes of length 12 bits (004 total): 24 33 62 72
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (000 total):
    Codes of length 15 bits (001 total): 82
    Codes of length 16 bits (125 total): 09 0A 16 17 18 19 1A 25 26 27 28 29 2A 34 35 36
                                         37 38 39 3A 43 44 45 46 47 48 49 4A 53 54 55 56
                                         57 58 59 5A 63 64 65 66 67 68 69 6A 73 74 75 76
                                         77 78 79 7A 83 84 85 86 87 88 89 8A 92 93 94 95
                                         96 97 98 99 9A A2 A3 A4 A5 A6 A7 A8 A9 AA B2 B3
                                         B4 B5 B6 B7 B8 B9 BA C2 C3 C4 C5 C6 C7 C8 C9 CA
                                         D2 D3 D4 D5 D6 D7 D8 D9 DA E1 E2 E3 E4 E5 E6 E7
                                         E8 E9 EA F1 F2 F3 F4 F5 F6 F7 F8 F9 FA
    Total number of codes: 162

 
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
  OFFSET: 0x000027E4
  Huffman table length = 31
  ----
  Destination ID = 1
  Class = 0 (DC / Lossless Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (003 total): 00 01 02
    Codes of length 03 bits (001 total): 03
    Codes of length 04 bits (001 total): 04
    Codes of length 05 bits (001 total): 05
    Codes of length 06 bits (001 total): 06
    Codes of length 07 bits (001 total): 07
    Codes of length 08 bits (001 total): 08
    Codes of length 09 bits (001 total): 09
    Codes of length 10 bits (001 total): 0A
    Codes of length 11 bits (001 total): 0B
    Codes of length 12 bits (000 total):
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (000 total):
    Codes of length 15 bits (000 total):
    Codes of length 16 bits (000 total):
    Total number of codes: 012

 
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
  OFFSET: 0x00002805
  Huffman table length = 181
  ----
  Destination ID = 1
  Class = 1 (AC Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (002 total): 00 01
    Codes of length 03 bits (001 total): 02
    Codes of length 04 bits (002 total): 03 11
    Codes of length 05 bits (004 total): 04 05 21 31
    Codes of length 06 bits (004 total): 06 12 41 51
    Codes of length 07 bits (003 total): 07 61 71
    Codes of length 08 bits (004 total): 13 22 32 81
    Codes of length 09 bits (007 total): 08 14 42 91 A1 B1 C1
    Codes of length 10 bits (005 total): 09 23 33 52 F0
    Codes of length 11 bits (004 total): 15 62 72 D1
    Codes of length 12 bits (004 total): 0A 16 24 34
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (001 total): E1
    Codes of length 15 bits (002 total): 25 F1
    Codes of length 16 bits (119 total): 17 18 19 1A 26 27 28 29 2A 35 36 37 38 39 3A 43
                                         44 45 46 47 48 49 4A 53 54 55 56 57 58 59 5A 63
                                         64 65 66 67 68 69 6A 73 74 75 76 77 78 79 7A 82
                                         83 84 85 86 87 88 89 8A 92 93 94 95 96 97 98 99
                                         9A A2 A3 A4 A5 A6 A7 A8 A9 AA B2 B3 B4 B5 B6 B7
                                         B8 B9 BA C2 C3 C4 C5 C6 C7 C8 C9 CA D2 D3 D4 D5
                                         D6 D7 D8 D9 DA E2 E3 E4 E5 E6 E7 E8 E9 EA F2 F3
                                         F4 F5 F6 F7 F8 F9 FA
    Total number of codes: 162

 
*** Marker: SOS (Start of Scan) (xFFDA) ***
  OFFSET: 0x000028BC
  Scan header length = 12
  Number of img components = 3
    Component[1]: selector=0x01, table=0x00
    Component[2]: selector=0x02, table=0x11
    Component[3]: selector=0x03, table=0x11
  Spectral selection = 0 .. 63
  Successive approximation = 0x00


*** Decoding SCAN Data ***
  OFFSET: 0x000028CA
  Scan Decode Mode: No IDCT (DC only)
    NOTE: Low-resolution DC component shown. Can decode full-res with [Options->Scan Segment->Full IDCT]

  Scan Data encountered marker   0xFFD9 @ 0x000A14FB.0

  Compression stats:
    Compression Ratio: 10.30:1
    Bits per pixel:     2.33:1

  Huffman code histogram stats:
    Huffman Table: (Dest ID: 0, Class: DC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:     3317 (  9%)
      # codes of length 03 bits:    19122 ( 54%)
      # codes of length 04 bits:     4554 ( 13%)
      # codes of length 05 bits:     4664 ( 13%)
      # codes of length 06 bits:     2880 (  8%)
      # codes of length 07 bits:      571 (  2%)
      # codes of length 08 bits:        4 (  0%)
      # codes of length 09 bits:        0 (  0%)
      # codes of length 10 bits:        0 (  0%)
      # codes of length 11 bits:        0 (  0%)
      # codes of length 12 bits:        0 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:        0 (  0%)
      # codes of length 15 bits:        0 (  0%)
      # codes of length 16 bits:        0 (  0%)

    Huffman Table: (Dest ID: 1, Class: DC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:     8410 ( 48%)
      # codes of length 03 bits:     2924 ( 17%)
      # codes of length 04 bits:     2955 ( 17%)
      # codes of length 05 bits:     2412 ( 14%)
      # codes of length 06 bits:      763 (  4%)
      # codes of length 07 bits:       92 (  1%)
      # codes of length 08 bits:        0 (  0%)
      # codes of length 09 bits:        0 (  0%)
      # codes of length 10 bits:        0 (  0%)
      # codes of length 11 bits:        0 (  0%)
      # codes of length 12 bits:        0 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:        0 (  0%)
      # codes of length 15 bits:        0 (  0%)
      # codes of length 16 bits:        0 (  0%)

    Huffman Table: (Dest ID: 0, Class: AC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:   339652 ( 44%)
      # codes of length 03 bits:    77424 ( 10%)
      # codes of length 04 bits:   161224 ( 21%)
      # codes of length 05 bits:    91695 ( 12%)
      # codes of length 06 bits:    29569 (  4%)
      # codes of length 07 bits:    40541 (  5%)
      # codes of length 08 bits:    19257 (  2%)
      # codes of length 09 bits:     8421 (  1%)
      # codes of length 10 bits:     5148 (  1%)
      # codes of length 11 bits:     1808 (  0%)
      # codes of length 12 bits:      647 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:        0 (  0%)
      # codes of length 15 bits:       53 (  0%)
      # codes of length 16 bits:      887 (  0%)

    Huffman Table: (Dest ID: 1, Class: AC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:    42941 ( 47%)
      # codes of length 03 bits:    16719 ( 18%)
      # codes of length 04 bits:    16532 ( 18%)
      # codes of length 05 bits:     8528 (  9%)
      # codes of length 06 bits:     4236 (  5%)
      # codes of length 07 bits:      351 (  0%)
      # codes of length 08 bits:     1718 (  2%)
      # codes of length 09 bits:      376 (  0%)
      # codes of length 10 bits:      115 (  0%)
      # codes of length 11 bits:       20 (  0%)
      # codes of length 12 bits:        8 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:       11 (  0%)
      # codes of length 15 bits:        0 (  0%)
      # codes of length 16 bits:        2 (  0%)

  YCC clipping in DC:
    Y  component: [<0=    0] [>255=    0]
    Cb component: [<0=    0] [>255=    0]
    Cr component: [<0=    0] [>255=    0]

  RGB clipping in DC:
    R  component: [<0=    0] [>255=    0]
    G  component: [<0=    0] [>255=    0]
    B  component: [<0=    0] [>255=    0]

  Brightest Pixel Search:
    YCC=[  984,  -21,    3] RGB=[251,252,245] @ MCU[ 87, 16]

  Finished Decoding SCAN Data
    Number of RESTART markers decoded: 0
    Next position in scan buffer: Offset 0x000A14FA.7

 
*** Marker: EOI (End of Image) (xFFD9) ***
  OFFSET: 0x000A14FB


*** Searching Compression Signatures ***

  Signature:           013BA18D5561625796E986FDBC09F846
  Signature (Rotated): 01AC57E12793DFA7C46C704625C5AF0F
  File Offset:         0 bytes
  Chroma subsampling:  2x2
  EXIF Make/Model:     OK   [FUJI PHOTO FILM CO., LTD.] [SP-3000]
  EXIF Makernotes:     OK  
  EXIF Software:       OK   [FDi V4.5 / FRONTIER355/375-1.7-0E-105]

  Searching Compression Signatures: (3327 built-in, 0 user(*) )

          EXIF.Make / Software        EXIF.Model                            Quality           Subsamp Match?
          -------------------------   -----------------------------------   ----------------  --------------
     CAM:[???                      ] [Treo 680                           ] [                ] Yes              
     CAM:[Canon                    ] [Canon PowerShot Pro1               ] [fine            ] No               
     CAM:[NIKON                    ] [E2500                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E3100                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E4500                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E5000                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E5700                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E775                               ] [FINE            ] No               
     CAM:[NIKON                    ] [E885                               ] [FINE            ] No               
     CAM:[OLYMPUS OPTICAL CO.,LTD  ] [C3040Z                             ] [                ] No               
     CAM:[PENTAX                   ] [PENTAX Optio 550                   ] [                ] No               
     CAM:[Research In Motion       ] [BlackBerry 9530                    ] [Superfine       ] Yes              
     CAM:[SEIKO EPSON CORP.        ] [PhotoPC 3000Z                      ] [                ] No               
     CAM:[SONY                     ] [DSC-H7                             ] [                ] No               
     CAM:[SONY                     ] [DSC-H9                             ] [                ] No               
     CAM:[SONY                     ] [DSC-S90                            ] [                ] No               
     CAM:[SONY                     ] [DSC-W1                             ] [                ] No               
     CAM:[SONY                     ] [SONY                               ] [                ] No               
     SW :[ACDSee                   ]                                       [                ]                  
     SW :[FixFoto                  ]                                       [fine            ]                  
     SW :[IJG Library              ]                                       [090             ]                  
     SW :[ZoomBrowser EX           ]                                       [high            ]                  

    The following IJG-based editors also match this signature:
     SW :[GIMP                     ]                                       [090             ]                  
     SW :[IrfanView                ]                                       [090             ]                  
     SW :[idImager                 ]                                       [090             ]                  
     SW :[FastStone Image Viewer   ]                                       [090             ]                  
     SW :[NeatImage                ]                                       [090             ]                  
     SW :[Paint.NET                ]                                       [090             ]                  
     SW :[Photomatix               ]                                       [090             ]                  
     SW :[XnView                   ]                                       [090             ]                  

  Based on the analysis of compression characteristics and EXIF metadata:

  ASSESSMENT: Class 4 - Uncertain if processed or original
              While the EXIF fields indicate original, no compression signatures
              in the current database were found matching this make/model

  Appears to be new signature for known camera.
  If the camera/software doesn't appear in list above,
  PLEASE ADD TO DATABASE with [Tools->Add Camera to DB]



foto ke-2

JPEGsnoop 1.4.2 by Calvin Hass
  http://www.impulseadventure.com/photo/
  -------------------------------------

  Filename: [E:\Locker\Entertainmant\foto\fms story\000333.jpg]
  Filesize: [878944] Bytes

Start Offset: 0x00000000
*** Marker: SOI (xFFD8) ***
  OFFSET: 0x00000000
 
*** Marker: APP1 (xFFE1) ***
  OFFSET: 0x00000002
  length          = 6865
  Identifier      = [Exif]
  Identifier TIFF = 0x[49492A00 08000000]
  Endian          = Intel (little)
  TAG Mark x002A  = 0x002A

  EXIF IFD0 @ Absolute 0x00000014
    Dir Length = 0x000A
    [Make                                ] = "FUJI PHOTO FILM CO., LTD."
    [Model                               ] = "SP-3000"
    [Orientation                         ] = Row 0: top, Col 0: left
    [XResolution                         ] = 720000/10000
    [YResolution                         ] = 720000/10000
    [ResolutionUnit                      ] = Inch
    [Software                            ] = "ACD Systems Digital Imaging"
    [DateTime                            ] = "1980:01:04 00:17:54"
    [YCbCrPositioning                    ] = Centered
    [ExifOffset                          ] = @ 0x00E8
    Offset to Next IFD = 0x00000206

  EXIF IFD1 @ Absolute 0x00000212
    Dir Length = 0x0003
    [Compression                         ] = JPEG
    [JpegIFOffset                        ] = @ +0x0230 = @ 0x023C
    [JpegIFByteCount                     ] = 6297
    Offset to Next IFD = 0x00000000

  EXIF SubIFD @ Absolute 0x000000F4
    Dir Length = 0x000C
    [ExifVersion                         ] = 02.10
    [DateTimeOriginal                    ] = "    :  :     :  :  "
    [DateTimeDigitized                   ] = "2008:08:21 18:24:29"
    [ComponentsConfiguration             ] = [Y Cb Cr .]
    [MakerNote                           ] = @ 0x01A6
    [SubSecTime                          ] = "949"
    [FlashPixVersion                     ] = 01.00
    [ColorSpace                          ] = sRGB
    [ExifImageWidth                      ] = 1228
    [ExifImageHeight                     ] = 1818
    [FileSource                          ] = DSC
    [SceneType                           ] = A directly photographed image

  EXIF MakerIFD @ Absolute 0x000001B2
    Makernote decode option not enabled.
 
*** Marker: SOF0 (Baseline DCT) (xFFC0) ***
  OFFSET: 0x00001AD5
  Frame header length = 17
  Precision = 8
  Number of Lines = 1818
  Samples per Line = 1228
  Image Size = 1228 x 1818
  Raw Image Orientation = Portrait
  Number of Img components = 3
    Component[1]: ID=0x01, Samp Fac=0x21 (Subsamp 1 x 1), Quant Tbl Sel=0x00 (Lum: Y)
    Component[2]: ID=0x02, Samp Fac=0x11 (Subsamp 2 x 1), Quant Tbl Sel=0x01 (Chrom: Cb)
    Component[3]: ID=0x03, Samp Fac=0x11 (Subsamp 2 x 1), Quant Tbl Sel=0x01 (Chrom: Cr)
 
*** Marker: DQT (xFFDB) ***
  Define a Quantization Table.
  OFFSET: 0x00001AE8
  Table length = 132
  ----
  Precision=8 bits
  Destination ID=0 (Luminance)
    DQT, Row #0:   2   1   1   2   3   5   6   7
    DQT, Row #1:   1   1   1   2   3   7   7   6
    DQT, Row #2:   1   1   2   3   5   7   8   7
    DQT, Row #3:   1   2   2   3   6  10  10   7
    DQT, Row #4:   2   2   4   7   8  13  12   9
    DQT, Row #5:   3   4   6   8  10  13  14  11
    DQT, Row #6:   6   8   9  10  12  15  15  12
    DQT, Row #7:   9  11  11  12  14  12  12  12
    Approx quality factor = 94.32 (scaling=11.36 variance=2.14)
  ----
  Precision=8 bits
  Destination ID=1 (Chrominance)
    DQT, Row #0:   3   3   4   8  18  18  18  18
    DQT, Row #1:   3   3   4  12  18  18  18  18
    DQT, Row #2:   4   4  10  18  18  18  18  18
    DQT, Row #3:   8  12  18  18  18  18  18  18
    DQT, Row #4:  18  18  18  18  18  18  18  18
    DQT, Row #5:  18  18  18  18  18  18  18  18
    DQT, Row #6:  18  18  18  18  18  18  18  18
    DQT, Row #7:  18  18  18  18  18  18  18  18
    Approx quality factor = 91.06 (scaling=17.89 variance=0.59)
 
*** Marker: DHT (Define Huffman Table) (xFFC4) ***
  OFFSET: 0x00001B6E
  Huffman table length = 197
  ----
  Destination ID = 0
  Class = 0 (DC / Lossless Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (000 total):
    Codes of length 03 bits (006 total): 01 02 05 06 07 08
    Codes of length 04 bits (003 total): 00 03 04
    Codes of length 05 bits (001 total): 09
    Codes of length 06 bits (001 total): 0A
    Codes of length 07 bits (000 total):
    Codes of length 08 bits (000 total):
    Codes of length 09 bits (000 total):
    Codes of length 10 bits (000 total):
    Codes of length 11 bits (000 total):
    Codes of length 12 bits (000 total):
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (000 total):
    Codes of length 15 bits (000 total):
    Codes of length 16 bits (000 total):
    Total number of codes: 011

  ----
  Destination ID = 0
  Class = 1 (AC Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (002 total): 01 02
    Codes of length 03 bits (001 total): 03
    Codes of length 04 bits (002 total): 04 11
    Codes of length 05 bits (005 total): 00 05 06 07 12
    Codes of length 06 bits (002 total): 21 31
    Codes of length 07 bits (004 total): 08 13 22 41
    Codes of length 08 bits (003 total): 32 51 61
    Codes of length 09 bits (006 total): 09 14 23 42 71 81
    Codes of length 10 bits (004 total): 15 52 91 A1
    Codes of length 11 bits (004 total): 16 62 B1 C1
    Codes of length 12 bits (003 total): 24 33 F0
    Codes of length 13 bits (006 total): 0A 17 43 72 82 D1
    Codes of length 14 bits (001 total): F1
    Codes of length 15 bits (002 total): 92 E1
    Codes of length 16 bits (023 total): 18 25 34 53 A2 63 B2 19 26 35 44 C2 73 83 1A 27
                                         64 93 B3 D2 C3 E2 F2
    Total number of codes: 068

  ----
  Destination ID = 1
  Class = 0 (DC / Lossless Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (001 total): 00
    Codes of length 03 bits (005 total): 01 02 03 04 05
    Codes of length 04 bits (001 total): 06
    Codes of length 05 bits (001 total): 07
    Codes of length 06 bits (001 total): 08
    Codes of length 07 bits (000 total):
    Codes of length 08 bits (000 total):
    Codes of length 09 bits (000 total):
    Codes of length 10 bits (000 total):
    Codes of length 11 bits (000 total):
    Codes of length 12 bits (000 total):
    Codes of length 13 bits (000 total):
    Codes of length 14 bits (000 total):
    Codes of length 15 bits (000 total):
    Codes of length 16 bits (000 total):
    Total number of codes: 009

  ----
  Destination ID = 1
  Class = 1 (AC Table)
    Codes of length 01 bits (000 total):
    Codes of length 02 bits (002 total): 00 01
    Codes of length 03 bits (002 total): 02 03
    Codes of length 04 bits (001 total): 11
    Codes of length 05 bits (003 total): 04 12 21
    Codes of length 06 bits (003 total): 13 31 41
    Codes of length 07 bits (003 total): 05 22 51
    Codes of length 08 bits (002 total): 14 61
    Codes of length 09 bits (004 total): 23 32 71 F0
    Codes of length 10 bits (005 total): 06 42 81 A1 B1
    Codes of length 11 bits (003 total): 33 52 C1
    Codes of length 12 bits (004 total): 24 62 91 D1
    Codes of length 13 bits (002 total): 15 E1
    Codes of length 14 bits (003 total): 34 72 F1
    Codes of length 15 bits (001 total): 43
    Codes of length 16 bits (001 total): 25
    Total number of codes: 039

 
*** Marker: SOS (Start of Scan) (xFFDA) ***
  OFFSET: 0x00001C35
  Scan header length = 12
  Number of img components = 3
    Component[1]: selector=0x01, table=0x00
    Component[2]: selector=0x02, table=0x11
    Component[3]: selector=0x03, table=0x11
  Spectral selection = 0 .. 63
  Successive approximation = 0x00


*** Decoding SCAN Data ***
  OFFSET: 0x00001C43
  Scan Decode Mode: No IDCT (DC only)
    NOTE: Low-resolution DC component shown. Can decode full-res with [Options->Scan Segment->Full IDCT]

  Scan Data encountered marker   0xFFD9 @ 0x000D695E.0

  Compression stats:
    Compression Ratio:  7.68:1
    Bits per pixel:     3.12:1

  Huffman code histogram stats:
    Huffman Table: (Dest ID: 0, Class: DC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:        0 (  0%)
      # codes of length 03 bits:    25795 ( 73%)
      # codes of length 04 bits:     8000 ( 23%)
      # codes of length 05 bits:     1249 (  4%)
      # codes of length 06 bits:       68 (  0%)
      # codes of length 07 bits:        0 (  0%)
      # codes of length 08 bits:        0 (  0%)
      # codes of length 09 bits:        0 (  0%)
      # codes of length 10 bits:        0 (  0%)
      # codes of length 11 bits:        0 (  0%)
      # codes of length 12 bits:        0 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:        0 (  0%)
      # codes of length 15 bits:        0 (  0%)
      # codes of length 16 bits:        0 (  0%)

    Huffman Table: (Dest ID: 1, Class: DC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:     9284 ( 26%)
      # codes of length 03 bits:    24294 ( 69%)
      # codes of length 04 bits:     1339 (  4%)
      # codes of length 05 bits:      193 (  1%)
      # codes of length 06 bits:        2 (  0%)
      # codes of length 07 bits:        0 (  0%)
      # codes of length 08 bits:        0 (  0%)
      # codes of length 09 bits:        0 (  0%)
      # codes of length 10 bits:        0 (  0%)
      # codes of length 11 bits:        0 (  0%)
      # codes of length 12 bits:        0 (  0%)
      # codes of length 13 bits:        0 (  0%)
      # codes of length 14 bits:        0 (  0%)
      # codes of length 15 bits:        0 (  0%)
      # codes of length 16 bits:        0 (  0%)

    Huffman Table: (Dest ID: 0, Class: AC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:   415628 ( 43%)
      # codes of length 03 bits:   111701 ( 12%)
      # codes of length 04 bits:   139018 ( 14%)
      # codes of length 05 bits:   182198 ( 19%)
      # codes of length 06 bits:    38096 (  4%)
      # codes of length 07 bits:    41950 (  4%)
      # codes of length 08 bits:    12702 (  1%)
      # codes of length 09 bits:    12492 (  1%)
      # codes of length 10 bits:     3704 (  0%)
      # codes of length 11 bits:     1723 (  0%)
      # codes of length 12 bits:      782 (  0%)
      # codes of length 13 bits:      859 (  0%)
      # codes of length 14 bits:      103 (  0%)
      # codes of length 15 bits:      147 (  0%)
      # codes of length 16 bits:      273 (  0%)

    Huffman Table: (Dest ID: 1, Class: AC)
      # codes of length 01 bits:        0 (  0%)
      # codes of length 02 bits:    74051 ( 46%)
      # codes of length 03 bits:    43434 ( 27%)
      # codes of length 04 bits:    12253 (  8%)
      # codes of length 05 bits:    16825 ( 11%)
      # codes of length 06 bits:     6162 (  4%)
      # codes of length 07 bits:     3930 (  2%)
      # codes of length 08 bits:      890 (  1%)
      # codes of length 09 bits:     1154 (  1%)
      # codes of length 10 bits:      627 (  0%)
      # codes of length 11 bits:      227 (  0%)
      # codes of length 12 bits:      167 (  0%)
      # codes of length 13 bits:       29 (  0%)
      # codes of length 14 bits:       22 (  0%)
      # codes of length 15 bits:        4 (  0%)
      # codes of length 16 bits:        1 (  0%)

  YCC clipping in DC:
    Y  component: [<0=    0] [>255=    0]
    Cb component: [<0=    0] [>255=    0]
    Cr component: [<0=    0] [>255=    0]

  RGB clipping in DC:
    R  component: [<0=    0] [>255=    0]
    G  component: [<0=    0] [>255=    0]
    B  component: [<0=    0] [>255=    0]

  Brightest Pixel Search:
    YCC=[  988,  -21,    3] RGB=[251,252,245] @ MCU[ 60,175]

  Finished Decoding SCAN Data
    Number of RESTART markers decoded: 0
    Next position in scan buffer: Offset 0x000D695D.4

 
*** Marker: EOI (End of Image) (xFFD9) ***
  OFFSET: 0x000D695E


*** Embedded JPEG Thumbnail ***
  Offset: 0x0000023C
  Length: 0x00001899 (6297)

  * Embedded Thumb Marker: SOI

  * Embedded Thumb Marker: APP1
    Length = 176

  * Embedded Thumb Marker: SOF
    Frame header length = 17
    Precision = 8
    Number of Lines = 120
    Samples per Line = 81
    Image Size = 81 x 120

  * Embedded Thumb Marker: DQT
    Length = 132
    ----
    Precision=0 bits
    Destination ID=0 (Luminance)
      DQT, Row #0:   3   2   1   3   4   7   9  11
      DQT, Row #1:   2   2   2   3   4  10  11  10
      DQT, Row #2:   2   2   3   4   7  10  12  10
      DQT, Row #3:   2   3   4   5   9  16  15  11
      DQT, Row #4:   3   4   6  10  12  20  19  14
      DQT, Row #5:   4   6  10  12  15  19  21  17
      DQT, Row #6:   9  12  14  16  19  22  22  18
      DQT, Row #7:  13  17  17  18  21  18  19  18
    ----
    Precision=0 bits
    Destination ID=1 (Chrominance)
      DQT, Row #0:   4   5   6  13  27  27  27  27
      DQT, Row #1:   5   5   7  18  27  27  27  27
      DQT, Row #2:   6   7  15  27  27  27  27  27
      DQT, Row #3:  13  18  27  27  27  27  27  27
      DQT, Row #4:  27  27  27  27  27  27  27  27
      DQT, Row #5:  27  27  27  27  27  27  27  27
      DQT, Row #6:  27  27  27  27  27  27  27  27
      DQT, Row #7:  27  27  27  27  27  27  27  27

  * Embedded Thumb Marker: DHT
    Length = 418

  * Embedded Thumb Marker: SOS
    Skipping scan data
    Skipped 5540 bytes

  * Embedded Thumb Marker: EOI

  * Embedded Thumb Signature: 0154DFF319B59E71D47D1ED5C4FBF4E6

*** Searching Compression Signatures ***

  Signature:           01F33F7F8758DADA8F99200CA44FD75B
  Signature (Rotated): 0125AF4DAC2A62E600F6D03E05B7CF91
  File Offset:         0 bytes
  Chroma subsampling:  1x2
  EXIF Make/Model:     OK   [FUJI PHOTO FILM CO., LTD.] [SP-3000]
  EXIF Makernotes:     OK  
  EXIF Software:       OK   [ACD Systems Digital Imaging]

  Searching Compression Signatures: (3327 built-in, 0 user(*) )

          EXIF.Make / Software        EXIF.Model                            Quality           Subsamp Match?
          -------------------------   -----------------------------------   ----------------  --------------
     SW :[ACDSee                   ]                                       [090-091         ]                  

  NOTE: EXIF Software field recognized as from editor
  Based on the analysis of compression characteristics and EXIF metadata:

  ASSESSMENT: Class 1 - Image is processed/edited



dari data-data diatas  coba tebak mana yang asli dan mana yang bukan? hayo tebak masih mo coba tebak gk ? udah yuah pe sini ja biar penasaran  :lol:
gk deh bercanda jangan ambil batu ah mending ambil uang ja dri kantong terus lemparin ke sini hehehehehe, okelah saya teruskan, saya akan coba menerangkan hasil dari analisa diatas coba teman-teman perhatikan hasil analisa dari ke-2 percobaan diatas ada yang beda gk ? yup benar sekali ada perbedaan tampak jelas sekali pada bagian
EXIF IFD0 @ Absolute 0x00000014
    Dir Length = 0x000B
    [Make                                ] = "FUJI PHOTO FILM CO., LTD."
    [Model                               ] = "SP-3000"
    [XResolution                         ] = 720000/10000
    [YResolution                         ] = 720000/10000
    [ResolutionUnit                      ] = Inch
    [Software                            ] = "FDi V4.5 / FRONTIER355/375-1.7-0E-105"
    [DateTime                            ] = "2008:08:21 18:24:29"
    [YCbCrPositioning                    ] = Centered
    [ExifOffset                          ] = @ 0x00FE
    Offset to Next IFD = 0x00000210[/spoiler]
dan
 EXIF IFD0 @ Absolute 0x00000014
    Dir Length = 0x000A
    [Make                                ] = "FUJI PHOTO FILM CO., LTD."
    [Model                               ] = "SP-3000"
    [Orientation                         ] = Row 0: top, Col 0: left
    [XResolution                         ] = 720000/10000
    [YResolution                         ] = 720000/10000
    [ResolutionUnit                      ] = Inch
    [Software                            ] = "ACD Systems Digital Imaging"
    [DateTime                            ] = "1980:01:04 00:17:54"
    [YCbCrPositioning                    ] = Centered
    [ExifOffset                          ] = @ 0x00E8
    Offset to Next IFD = 0x00000206[/spoiler]

sangat jelas bukan perbedaannya sudah taukan perbedaannya dimana ?ko belum c ? masa? pa cuman pura-pura nih eheheehe nah betul itu dia maksud saya terrnyata kamu sudah mengerti kan, ya memang jelas sekali terlihat pada keterangan
 [spoiler][Software                            ] = "FDi V4.5 / FRONTIER355/375-1.7-0E-105"[/spoiler] pada bagian yang pertama dan menunjukan software yang digunakan untuk mengambil foto tersebut

dan yang kedua memiliki keterangan sebagai berikut  dan menunjukan foto diambil dengan menggunakan sofware ACD SYSTEM
[Software                            ] = "ACD Systems Digital Imaging"[/spoiler]

perbedaan yang ke-2 adalah pada bagian akhir

 *** Searching Compression Signatures ***

  Signature:           013BA18D5561625796E986FDBC09F846
  Signature (Rotated): 01AC57E12793DFA7C46C704625C5AF0F
  File Offset:         0 bytes
  Chroma subsampling:  2x2
  EXIF Make/Model:     OK   [FUJI PHOTO FILM CO., LTD.] [SP-3000]
  EXIF Makernotes:     OK  
  EXIF Software:       OK   [FDi V4.5 / FRONTIER355/375-1.7-0E-105]

  Searching Compression Signatures: (3327 built-in, 0 user(*) )

          EXIF.Make / Software        EXIF.Model                            Quality           Subsamp Match?
          -------------------------   -----------------------------------   ----------------  --------------
     CAM:[???                      ] [Treo 680                           ] [                ] Yes              
     CAM:[Canon                    ] [Canon PowerShot Pro1               ] [fine            ] No               
     CAM:[NIKON                    ] [E2500                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E3100                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E4500                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E5000                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E5700                              ] [FINE            ] No               
     CAM:[NIKON                    ] [E775                               ] [FINE            ] No               
     CAM:[NIKON                    ] [E885                               ] [FINE            ] No               
     CAM:[OLYMPUS OPTICAL CO.,LTD  ] [C3040Z                             ] [                ] No               
     CAM:[PENTAX                   ] [PENTAX Optio 550                   ] [                ] No               
     CAM:[Research In Motion       ] [BlackBerry 9530                    ] [Superfine       ] Yes              
     CAM:[SEIKO EPSON CORP.        ] [PhotoPC 3000Z                      ] [                ] No               
     CAM:[SONY                     ] [DSC-H7                             ] [                ] No               
     CAM:[SONY                     ] [DSC-H9                             ] [                ] No               
     CAM:[SONY                     ] [DSC-S90                            ] [                ] No               
     CAM:[SONY                     ] [DSC-W1                             ] [                ] No               
     CAM:[SONY                     ] [SONY                               ] [                ] No               
     SW :[ACDSee                   ]                                       [                ]                  
     SW :[FixFoto                  ]                                       [fine            ]                  
     SW :[IJG Library              ]                                       [090             ]                  
     SW :[ZoomBrowser EX           ]                                       [high            ]                  

    The following IJG-based editors also match this signature:
     SW :[GIMP                     ]                                       [090             ]                  
     SW :[IrfanView                ]                                       [090             ]                  
     SW :[idImager                 ]                                       [090             ]                  
     SW :[FastStone Image Viewer   ]                                       [090             ]                  
     SW :[NeatImage                ]                                       [090             ]                  
     SW :[Paint.NET                ]                                       [090             ]                  
     SW :[Photomatix               ]                                       [090             ]                  
     SW :[XnView                   ]                                       [090             ]                  


 foto ke-2
*** Searching Compression Signatures ***

  Signature:           01F33F7F8758DADA8F99200CA44FD75B
  Signature (Rotated): 0125AF4DAC2A62E600F6D03E05B7CF91
  File Offset:         0 bytes
  Chroma subsampling:  1x2
  EXIF Make/Model:     OK   [FUJI PHOTO FILM CO., LTD.] [SP-3000]
  EXIF Makernotes:     OK  
  EXIF Software:       OK   [ACD Systems Digital Imaging]

  Searching Compression Signatures: (3327 built-in, 0 user(*) )

          EXIF.Make / Software        EXIF.Model                            Quality           Subsamp Match?
          -------------------------   -----------------------------------   ----------------  --------------
     SW :[ACDSee                   ]                                       [090-091         ]                  


data diatas menerangkan tentang perngkat keras,sofware,jenis perubahan yang telah dilakukan  dan juga kwalitas gambar yang dihasilkan, saya rasa cukup sekian artikel kali ini semoga teman-teman semua dapat mengerti apa yang saya tuliskan, saya hanya seorang pemula yang belum ada apa-apanya dibandingkan teman-teman semua oleh karena itu jika masih banyak kekeliruan mohon dimaafkan dan diluruskan agar saya dapat menjadi yang lebih baik lagi



Blogged with the Flock Browser

0 Response to "forensik foto"

Posting Komentar